$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1a960b8-43f7-33f3-a720-d22d9f43511f.roa File: f1a960b8-43f7-33f3-a720-d22d9f43511f.roa (raw, json) Hash identifier: q8pVG7A79dOs8tO/KdJxsTlyGFfTkUuw262p6KEoiG0= Subject key identifier: 68:9B:59:B3:98:64:DD:0F:9B:D8:18:D1:81:93:4F:CB:FB:3A:40:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB961E31DDB06F0305A0DD8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1a960b8-43f7-33f3-a720-d22d9f43511f.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33668 IP address blocks: 68.32.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:61:e3:1d:db:06:f0:30:5a:0d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=8cf0c57a-257a-4227-af02-8f0bcb53e82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:4c:70:3a:43:54:fb:35:c8:38:c9:0c:81: 19:f8:7a:1e:bc:ce:25:15:82:fc:28:b4:49:e1:7e: 89:ef:c5:f3:8f:ca:3c:38:98:c0:8c:df:af:b6:66: a5:a0:3f:aa:ef:8b:7d:80:10:82:f6:d0:79:f6:ac: 4d:61:37:b8:5e:5d:d0:df:f8:7a:60:16:dc:b3:fd: 88:80:2c:84:73:ca:eb:45:d0:8d:87:bc:07:8c:d8: 54:c5:66:b6:09:8e:97:9c:6a:26:0b:98:53:e2:9e: 58:42:d1:7b:90:15:2e:46:f2:8e:9a:80:50:2c:c4: 58:68:37:b9:5c:fc:6d:37:df:10:41:36:7c:46:58: 79:85:32:b8:5e:2f:40:12:bd:51:93:b6:98:c9:a4: 3f:44:78:19:a0:98:2c:60:7e:3c:fb:33:d2:39:2b: 36:b5:74:03:f7:8f:4f:71:80:58:9e:6a:52:54:6c: 18:5c:c8:35:d2:83:17:10:54:58:48:da:c6:28:74: 3b:79:81:b0:43:d2:e7:01:de:78:99:fd:a8:69:36: 90:74:fb:68:a8:f0:f7:73:f1:3a:2e:68:f3:47:2a: 57:03:05:b0:f2:a8:85:fa:56:a9:3b:26:1d:83:8d: ab:e1:42:7a:89:29:32:d0:8a:cc:ff:ff:cf:7b:d9: af:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9B:59:B3:98:64:DD:0F:9B:D8:18:D1:81:93:4F:CB:FB:3A:40:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1a960b8-43f7-33f3-a720-d22d9f43511f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:13:83:ce:d0:62:e5:a5:9c:cd:17:5c:87:d9:5d:be:86:63: db:fe:9e:28:ba:5b:37:02:e8:69:ca:0c:80:12:8d:57:fe:09: d5:47:bd:df:32:89:3f:30:1f:66:ef:a0:11:83:dd:d7:34:92: 56:3f:e4:c6:dd:96:fb:0f:ac:3d:37:bd:0d:75:5d:00:38:0e: db:00:b7:a1:9d:65:d3:2b:23:a2:0b:83:df:0f:d0:3d:74:93: 61:d1:94:41:ef:96:ad:8d:2a:35:71:7d:ee:02:27:83:2b:08: 31:05:39:b0:73:67:eb:3c:d4:21:19:10:e4:cd:fb:74:2c:45: 5d:b2:83:5b:20:77:84:23:7b:56:5e:97:81:25:90:9e:4b:2f: b6:4a:3a:59:27:a5:12:e0:52:df:61:a6:41:de:92:f4:8c:49: ff:ea:2d:d4:5f:9c:25:0c:4f:c3:ce:b7:49:59:d0:d5:c5:66: d9:14:10:6c:93:39:07:c3:1c:9f:1e:bd:c1:9e:99:dc:1a:07: 9e:47:2b:77:b8:61:f8:06:65:95:0c:4b:3d:e3:2f:96:50:ff: 80:31:83:99:78:45:68:21:54:88:8e:ac:78:38:f4:b7:4e:6e: 16:df:06:9a:d9:09:7f:97:ee:90:13:04:69:3b:67:4f:b1:3e: 3d:f0:98:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uWHjHdsG8DBaDdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OGNmMGM1N2EtMjU3YS00MjI3LWFmMDItOGYwYmNiNTNlODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouxMcDpDVPs1yDjJDIEZ+HoevM4lFYL8KLRJ 4X6J78Xzj8o8OJjAjN+vtmaloD+q74t9gBCC9tB59qxNYTe4Xl3Q3/h6YBbcs/2I gCyEc8rrRdCNh7wHjNhUxWa2CY6XnGomC5hT4p5YQtF7kBUuRvKOmoBQLMRYaDe5 XPxtN98QQTZ8Rlh5hTK4Xi9AEr1Rk7aYyaQ/RHgZoJgsYH48+zPSOSs2tXQD949P cYBYnmpSVGwYXMg10oMXEFRYSNrGKHQ7eYGwQ9LnAd54mf2oaTaQdPtoqPD3c/E6 LmjzRypXAwWw8qiF+lapOyYdg42r4UJ6iSky0IrM///Pe9mvZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGibWbOYZN0Pm9gY0YGTT8v7OkAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjFhOTYwYjgtNDNmNy0z M2YzLWE3MjAtZDIyZDlmNDM1MTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRCCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoTg87QYuWlnM0XXIfZXb6GY9v+nii6WzcC6GnKDIASjVf+CdVHvd8y iT8wH2bvoBGD3dc0klY/5MbdlvsPrD03vQ11XQA4DtsAt6GdZdMrI6ILg98P0D10 k2HRlEHvlq2NKjVxfe4CJ4MrCDEFObBzZ+s81CEZEOTN+3QsRV2yg1sgd4Qje1Ze l4ElkJ5LL7ZKOlknpRLgUt9hpkHekvSMSf/qLdRfnCUMT8POt0lZ0NXFZtkUEGyT OQfDHJ8evcGemdwaB55HK3e4YfgGZZUMSz3jL5ZQ/4Axg5l4RWghVIiOrHg49LdO bhbfBprZCX+X7pATBGk7Z0+xPj3wmI0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:26:58 2025 by rpki-client